Administrator account without password network file sharing

[malaki]

So normally, when you try to use the windows file sharing,
share a folder and try to access it over the network, you get asked for a
username and password

what if you have an admin account without a password?
could then anyone access your files?

im asking because Im using a public network/wifi
and a few hours ago when I checked I noticed that my PC was discoverable on the network, despite me
disabling network sharing and discovery and setting the network as a public network,

my PCs admin account had no password set, and I noticed that my Desktop folder was shared
despite me not remembering ever setting it as shared

might it be possible that someone using the same public wifi was able to access my files / desktop folder?


if I had password protected sharing turned on, and my admin account had no password
would someone be able to access a shared folder by using the username and blank password to login?

as far as I remember normally you cant use blank passwords to login right? as a safety measure?

 

[Kaktussoft]

Setting the connection as "public network" instructs the windows firewall to NOT enable network discovery. You cannot access a share using an accountname WITHOUT a password.

Why not try yourself and see what happens? Do you really see the computer on other devices? Can they see your shares as well?

 

[malaki]

right now I have no other device to test
its a wlan hotspot (paid)

I remember setting it to public, but when I checked today network discovery and sharing was enabled

and one of my folders was shared ( I don't remember ever sharing it )
so now im scared that someone might have downloaded my files because I had no admin password set

could that be possible? or wouldn't windows "no blank password" default setting prevent that?

 

[Kaktussoft]

right now I have no other device to test
its a wlan hotspot (paid)

I remember setting it to public, but when I checked today network discovery and sharing was enabled

and one of my folders was shared ( I don't remember ever sharing it )
so now im scared that someone might have downloaded my files because I had no admin password set

could that be possible? or wouldn't windows "no blank password" default setting prevent that?

network set to public: No one from inside/outside LAN can access and see your shares.
no password: netwroklogin is not allowed

Most (maybe all) good public hostspots have a built-in firewall that prevents network traffic from 1 wireless connection to the other. But never trust them! You must protect your stuff yourself.

In command prompt do:

net  share

Post output

 

[doctore]

You can actually turn on network discovery and file sharing for public networks, as well.

 

[malaki]

right now I have no other device to test
its a wlan hotspot (paid)

I remember setting it to public, but when I checked today network discovery and sharing was enabled

and one of my folders was shared ( I don't remember ever sharing it )
so now im scared that someone might have downloaded my files because I had no admin password set

could that be possible? or wouldn't windows "no blank password" default setting prevent that?

network set to public: No one from inside/outside LAN can access and see your shares.
no password: netwroklogin is not allowed

Most (maybe all) good public hostspots have a built-in firewall that prevents network traffic from 1 wireless connection to the other. But never trust them! You must protect your stuff yourself.

In command prompt do:

net  share

Post output

so even if my folder was shared, and sharing and discovery was activated (both were activated and my desktop folder was shared)
then because of the no blank password default setting no one should have been able to download my files?


Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.
C:\Users\hhh>net share
Share name Resource Remark
-------------------------------------------------------------------------------
C$ C:\ Default share
D$ D:\ Default share
E$ E:\ Default share
IPC$ Remote IPC
ADMIN$ C:\Windows Remote Admin
The command completed successfully.

You can actually turn on network discovery and file sharing for public networks, as well.

yeah you can, and it was turned on but I don't remember turning it on myself
and my desktop folder was shared

 

[Kaktussoft]

C$ C:\ Default share
D$ D:\ Default share
E$ E:\ Default share
IPC$ Remote IPC
ADMIN$ C:\Windows Remote Admin

all default stuff. And they end on dollar sign.... so hidden.

 

[malaki]

C$ C:\ Default share
D$ D:\ Default share
E$ E:\ Default share
IPC$ Remote IPC
ADMIN$ C:\Windows Remote Admin

all default stuff. And they end on dollar sign.... so hidden.

yes I disabled the sharing of my desktop folder when I saw it
but it was activated, I just wanted to know if my admin password was blank and sharing and discovery was
on
If someone could have downloaded something?

 

[Kaktussoft]

C$ C:\ Default share
D$ D:\ Default share
E$ E:\ Default share
IPC$ Remote IPC
ADMIN$ C:\Windows Remote Admin

all default stuff. And they end on dollar sign.... so hidden.

yes I disabled the sharing of my desktop folder when I saw it
but it was activated, I just wanted to know if my admin password was blank and sharing and discovery was
on
If someone could have downloaded something?

Impossible. Q's Tech Spot: Windows 7 folder sharing with no password

 

[malaki]

C$ C:\ Default share
D$ D:\ Default share
E$ E:\ Default share
IPC$ Remote IPC
ADMIN$ C:\Windows Remote Admin

all default stuff. And they end on dollar sign.... so hidden.

yes I disabled the sharing of my desktop folder when I saw it
but it was activated, I just wanted to know if my admin password was blank and sharing and discovery was
on
If someone could have downloaded something?

Impossible. Q's Tech Spot: Windows 7 folder sharing with no password

Im happy to hear that, thanks for your help

 

[doctore]

C$ C:\ Default share
D$ D:\ Default share
E$ E:\ Default share
IPC$ Remote IPC
ADMIN$ C:\Windows Remote Admin

all default stuff. And they end on dollar sign.... so hidden.

yes I disabled the sharing of my desktop folder when I saw it
but it was activated, I just wanted to know if my admin password was blank and sharing and discovery was
on
If someone could have downloaded something?

Impossible. Q's Tech Spot: Windows 7 folder sharing with no password

Actually, not impossible. If the share's permissions were set to Everyone or Guest, you don't need password to access it.

OP - I wouldn't worry about someone accessing your computer that day, but I would be concerned that a folder was shared without me knowing it...

 

[malaki]

yes I disabled the sharing of my desktop folder when I saw it
but it was activated, I just wanted to know if my admin password was blank and sharing and discovery was
on
If someone could have downloaded something?

Impossible. Q's Tech Spot: Windows 7 folder sharing with no password

Actually, not impossible. If the share's permissions were set to Everyone or Guest, you don't need password to access it.

OP - I wouldn't worry about someone accessing your computer that day, but I would be concerned that a folder was shared without me knowing it...

yeah
that's what made me scared
I thought maybe someone logged in using my admin account and set the folder to shared himself?
but it seems he wouldn't be able to do that with my blank password so ...

 

[LMiller7]

Having an enabled Administrator account with no password is a security risk. Having no password on the account is the default but is not suitable for continued use.